Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier: qH9pKOhSlcewT++qdSRQOWJFvQiYOPR+E05lyLIdIwQ=
Subject key identifier: 1C:13:20:28:FF:70:4D:08:0C:5D:61:A3:5E:CD:17:87:D3:1F:8E:8C
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 0199FC8F2AEDC4320C42A59E2E43B2B6CE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number: 0984
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=)
2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: EgrgZU1d8LKzrfhZxbvG24WOEwzYx8eYw37AozlgfUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:ed:c4:32:0c:42:a5:9e:2e:43:b2:b6:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=1c132028ff704d080c5d61a35ecd1787d31f8e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:5c:d2:aa:34:df:79:b6:b9:ab:b5:a2:c7:
e8:36:da:7a:5f:3e:9c:56:e2:b9:97:20:ad:d5:d3:
ab:53:50:73:5a:60:2e:0c:a5:fc:a0:1e:fc:bf:86:
bc:11:4e:c2:98:be:63:72:25:3d:c5:52:c6:f8:85:
d7:8d:0f:df:55:6c:1c:fe:7f:c3:66:ae:63:64:27:
49:92:71:7c:29:dc:60:a1:04:57:d9:59:8d:a1:fd:
ff:54:a0:e9:7f:1a:c8:47:c1:8e:1e:87:bf:52:e1:
f8:78:d1:a0:a1:2f:7d:63:51:ff:e9:3d:88:24:78:
df:86:91:c5:4d:fe:1b:b2:c2:ec:92:b4:2e:c0:76:
e9:f7:5b:65:6f:98:b3:8b:f6:dd:03:37:3e:f0:09:
4a:62:45:61:ca:82:48:0a:74:d6:d1:e1:85:43:eb:
52:3a:2b:c7:cc:c0:e6:bc:45:d7:00:6f:ac:a8:4d:
f6:67:c8:67:78:b1:29:0f:e2:b6:d2:be:8d:65:86:
e4:56:3c:b4:c7:52:a2:bf:fe:1f:5e:63:ad:c2:64:
77:25:a9:15:16:5f:d4:d7:ce:88:6e:2e:97:9a:bf:
72:ce:6e:52:f7:59:be:f4:4c:41:c5:2c:5c:70:92:
24:94:2a:de:2c:dd:85:e2:b0:27:c8:83:7b:77:bc:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:13:20:28:FF:70:4D:08:0C:5D:61:A3:5E:CD:17:87:D3:1F:8E:8C
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:49:a8:dd:2c:0b:1b:29:d2:3a:f0:59:b4:42:9a:59:90:
fc:28:08:6b:32:a2:76:7d:85:a2:64:e8:43:53:32:33:4d:34:
3d:3f:41:cc:f7:47:4c:b8:74:3a:cc:88:e2:44:b5:58:40:7f:
4d:d9:81:5a:68:80:e7:ff:0a:d7:52:3f:67:48:ee:c5:dc:5a:
15:59:3e:02:7d:5a:8d:c7:6d:c4:61:61:de:3c:0a:cb:b5:8c:
d6:84:e8:d1:f6:16:ca:7e:9e:0f:69:59:fd:b3:08:d6:87:8e:
d9:18:3c:86:c2:83:13:34:e3:c2:7d:09:7a:64:55:6e:bc:8b:
01:e4:b3:b1:0d:99:81:6f:5c:76:ec:4d:03:5d:b8:50:e0:c5:
92:87:9b:60:a2:cb:01:af:ed:54:55:bb:f7:44:a7:dc:22:72:
ba:bf:64:10:f6:1a:f1:3d:57:61:85:8e:64:2a:1b:67:34:69:
8f:fa:af:64:9d:18:c7:df:c3:ee:ff:b0:b8:0e:dd:34:08:92:
76:89:ba:69:49:27:86:df:4d:f9:32:45:9c:d5:64:02:1c:ee:
33:e6:fa:5e:de:5e:ee:92:8f:9a:c4:93:04:d7:6e:a2:3c:75:
6b:34:37:f2:c5:4c:61:c6:13:01:3b:9e:fc:9f:af:39:d7:7d:
1a:78:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:31 2025 by rpki-client